Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: EvR9T+Bjd5eruRzSOiAGfL6TJBB8wu7leT/17NE6F0M=
Subject key identifier: 4E:74:EA:41:EF:AE:AB:71:A3:C4:52:E9:C9:BF:70:97:77:49:86:8E
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 01A0CA7D738EE1DA68189809A66F9898921A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 1140
Signing time: Tue 22 Sep 2026 19:00:14 +0000
Manifest this update: Tue 22 Sep 2026 19:00:14 +0000
Manifest next update: Wed 23 Sep 2026 19:00:14 +0000
Files and hashes: 1: KuefoOzdZ9vrXjVoaWqLBNOd8Fc.roa (hash: Tr2+OxM2L2vZYYtrtzp3JmsEgxHYlAlF0KBqV8P0L1o=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: lHTrXzCYizoJp6o0J/LyoHzLZPgYOfZlobVRNAkSdP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:73:8e:e1:da:68:18:98:09:a6:6f:98:98:92:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Sep 22 19:00:14 2026 GMT
Not After : Sep 23 19:00:14 2026 GMT
Subject: CN=4e74ea41efaeab71a3c452e9c9bf70977749868e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:b2:15:0b:f2:c7:59:9c:fc:d8:7d:09:be:
df:b3:99:89:28:26:91:5f:c4:ae:75:ec:2d:fd:92:
ac:c2:ee:ea:4f:b4:d9:4f:c1:31:74:2c:99:a2:95:
c9:34:46:23:f7:f3:a8:d7:76:ed:bb:67:e9:2e:a4:
fc:de:85:29:1c:92:e8:9a:5a:55:d5:7f:1f:71:dc:
9f:5a:37:21:33:57:44:9f:3c:43:3a:4a:19:26:79:
5f:b3:44:ad:c7:ca:fa:40:8c:72:83:58:d2:b7:f0:
5e:7f:ea:2d:23:f0:0d:08:2b:b0:c7:b0:c0:8c:58:
42:24:93:10:43:af:8e:dd:4b:f6:d9:11:4f:97:85:
9c:49:e7:2d:42:ef:42:56:8b:cc:24:0c:56:1a:d0:
a8:67:41:10:26:64:8a:8a:17:60:fd:13:34:66:fb:
f0:0c:7d:ff:bc:e0:bc:34:16:6b:fc:1a:4f:47:e3:
79:f8:cf:11:b8:3b:66:7b:b5:88:83:c5:a2:9a:f6:
12:b3:df:7d:3f:52:d9:9b:3d:7c:d6:a2:ca:7a:3e:
46:db:2a:a1:ba:80:86:11:3b:d9:e1:ab:af:7c:5a:
47:c3:a9:f3:07:17:42:cf:c2:07:b3:55:31:39:30:
9e:5d:f4:8c:8a:9d:bd:0b:1e:19:10:ba:8d:10:af:
7a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:EA:41:EF:AE:AB:71:A3:C4:52:E9:C9:BF:70:97:77:49:86:8E
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:29:04:c4:e4:4b:60:6f:88:fd:a7:fd:0f:e0:5a:39:2d:72:
f0:19:e9:33:75:77:0e:3c:f3:61:9b:7d:a5:b9:2f:eb:c8:4c:
ab:b3:17:4c:31:c3:28:34:a4:9b:27:e6:11:84:21:1e:1b:26:
53:6c:81:61:59:9c:5e:06:87:32:5c:0f:cd:3d:54:7a:04:75:
1b:2c:95:ff:5c:06:be:59:92:c6:76:f3:17:8c:e9:e2:7d:13:
3a:af:23:9d:2e:f4:29:d7:e1:d1:8d:ea:8f:58:e8:bf:09:e9:
bd:f9:c5:7c:3e:67:94:1e:d6:29:13:46:c5:8c:55:9c:ca:79:
0c:32:a9:15:1d:d2:a7:73:dd:c5:f8:e0:53:a0:83:41:1f:99:
cf:62:45:1c:ff:0e:44:cd:73:e7:18:13:a3:ce:f4:55:86:03:
a0:2e:70:a2:9c:06:8e:7b:f6:f9:db:26:61:25:f3:11:fd:92:
95:29:f4:13:ce:2a:2b:6b:07:77:f0:9e:e5:33:75:58:41:4a:
ab:d7:75:f2:b3:a2:83:c3:fb:d2:e3:ae:e6:4d:6f:a9:fd:a3:
ee:20:0c:c6:ec:20:b1:c7:e9:08:fc:68:c0:ff:88:4b:8d:14:
d5:ee:a7:b9:48:6c:e4:23:ee:f9:d9:1a:a4:e4:2d:79:47:82:
9f:1e:5b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:08:43 2026 by rpki-client